
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/3130332e3138352e34342e302f32332d3233203d3e203538383230.roa
File: 3130332e3138352e34342e302f32332d3233203d3e203538383230.roa (raw, json)
Hash identifier: AtTReWoHalW1jTCt7si9vqdmAaRn+woGu9bysUat+zE=
Subject key identifier: CA:EA:0F:FF:6F:D4:ED:BA:1C:25:04:B8:FA:18:00:D8:26:D6:F3:F2
Certificate issuer: /CN=CBE872C7F7E881E738FBB983FF5D84A20A1B4A35
Certificate serial: 4F101AFB09791108916E8BBB6E8944D02C646917
Authority key identifier: CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/3130332e3138352e34342e302f32332d3233203d3e203538383230.roa
Signing time: Mon 10 Aug 2026 15:00:50 +0000
ROA not before: Mon 10 Aug 2026 14:55:50 +0000
ROA not after: Mon 09 Aug 2027 15:00:50 +0000
asID: 58820
IP address blocks: 103.185.44.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl
rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 12:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:10:1a:fb:09:79:11:08:91:6e:8b:bb:6e:89:44:d0:2c:64:69:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBE872C7F7E881E738FBB983FF5D84A20A1B4A35
Validity
Not Before: Aug 10 14:55:50 2026 GMT
Not After : Aug 9 15:00:50 2027 GMT
Subject: CN=CAEA0FFF6FD4EDBA1C2504B8FA1800D826D6F3F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b5:56:82:1a:4f:ed:a6:c0:32:79:69:9a:be:
5a:33:d6:c4:3a:b8:b7:f8:54:c9:a5:d2:46:76:a7:
29:45:43:d0:93:1c:7c:19:29:79:a6:c9:46:5b:68:
0a:63:4b:ad:16:c9:de:47:d2:87:18:54:49:0b:97:
19:43:6d:b9:8b:9f:ad:69:d5:8a:ae:da:fd:e2:c0:
70:00:0c:3e:d5:30:7d:f2:2c:4c:c9:17:22:18:31:
75:c7:ae:8e:08:4f:26:86:3c:64:7d:49:34:42:35:
05:97:63:33:30:89:32:0c:32:22:7c:9a:72:8c:e2:
92:76:56:3a:c7:ae:ca:34:f6:e4:b1:21:15:77:75:
21:47:51:33:a4:12:42:72:f2:b1:21:ee:4f:59:a4:
02:27:3c:30:ca:e3:61:67:43:32:27:49:76:90:a9:
d8:cc:a4:c7:55:9b:c7:04:d3:09:2e:5b:e2:45:57:
ac:ff:a4:ed:01:55:13:b3:47:6e:d6:f5:e5:44:b3:
2c:b6:e3:a0:0d:68:1d:72:d5:dd:31:c9:18:15:27:
1c:ad:c3:a2:84:40:32:d5:cf:95:b4:b6:51:44:e3:
9f:4d:26:75:eb:46:2c:ba:f2:48:71:03:8d:51:16:
17:2e:b6:fc:ad:d4:ed:67:e5:0a:ec:86:5b:ee:41:
67:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EA:0F:FF:6F:D4:ED:BA:1C:25:04:B8:FA:18:00:D8:26:D6:F3:F2
X509v3 Authority Key Identifier:
keyid:CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/3130332e3138352e34342e302f32332d3233203d3e203538383230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.185.44.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:2a:59:28:88:28:57:68:05:49:4f:ae:b6:48:c2:7c:5e:79:
44:ec:42:20:7d:28:0b:58:16:1d:de:1a:aa:14:8f:e3:9d:1d:
67:0d:1a:6e:5c:6f:f3:04:10:96:ac:79:c2:b5:eb:1d:a6:a0:
f6:96:83:22:b5:d3:04:92:fb:66:5d:aa:44:82:bf:3a:c1:84:
08:a4:d7:21:9b:38:eb:f8:4f:88:0d:a3:46:42:71:59:59:e8:
5f:b5:92:91:eb:73:47:45:e3:46:b8:9f:01:dd:a3:51:64:50:
ad:5a:20:4f:3d:14:d6:0a:48:34:eb:07:98:c8:84:58:ff:84:
79:ab:6a:49:cc:96:3a:d3:50:af:e1:8b:76:17:36:15:9b:5e:
fc:02:5b:04:6c:fa:5e:65:b6:fa:11:4f:5f:a8:06:e6:cc:2f:
d5:80:c5:cf:83:67:82:0e:80:6f:70:0f:39:67:bf:b7:e2:da:
9e:dd:d2:39:dd:de:ea:ce:a4:d4:1b:37:e7:7a:e7:3a:59:35:
4c:36:b1:6b:18:b4:30:51:4d:2e:01:af:68:11:2e:28:63:eb:
43:f6:66:b9:49:df:b8:18:13:5c:25:9f:13:69:f3:4b:59:05:
f0:23:fb:7f:91:f6:12:03:4f:73:87:93:12:10:73:3e:1c:40:
d6:bf:55:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 00:17:50 2026 by rpki-client